Privacy policy

You can consult the FIIAPP Record of Processing Activities here.

This Privacy Policy has been developed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as other applicable legislation, in order to guarantee the fundamental right to data protection at all times.

The data you provide as a web user and/or that is collected through forms of the INTERNATIONAL AND IBERO-AMERICAN FOUNDATION FOR ADMINISTRATION AND PUBLIC POLICIES, F.S.P. (FIIAPP) is intended to maintain the relationship you have or request with our organization.

The purpose of this Policy is to inform the owners of personal data, whose information is being collected, about the specific processing of their data, the purposes of such processing, the contact details for exercising their rights, the data retention periods, and the security measures in place, among other aspects.


Who is responsible for processing your personal data?

The data controller is the INTERNATIONAL AND IBERO-AMERICAN FOUNDATION FOR ADMINISTRATION AND PUBLIC POLICIES, F.S.P., with registered address at Avenida del Partenón, 16–18, 28042 Madrid (protecciondatos@fiiapp.es).


Who is the Data Protection Officer?

The Data Protection Officer (DPO) ensures diligent compliance with personal data protection regulations. You may contact the DPO at the postal address of the INTERNATIONAL AND IBERO-AMERICAN FOUNDATION FOR ADMINISTRATION AND PUBLIC POLICIES, F.S.P., Avenida del Partenón, 16–18, 28042 Madrid, or in writing to protecciondatos@fiiapp.es.


Data Processing, Purpose and Lawfulness

The personal data that may be collected directly from the data subject will be incorporated into the corresponding processing activity owned by FIIAPP.

The processing activities carried out by FIIAPP, as well as their purposes, are set out in its Record of Processing Activities.

The personal data requested will be strictly limited to that necessary to identify and process the request made by the data subject. The specific purposes for which each processing is carried out are detailed in the information clauses included in each of the data collection methods (web forms, paper forms, contracts).

This information will be processed confidentially, fairly, lawfully and transparently in relation to the data subject. Personal data will be collected for specified, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.

The data collected will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. They will be accurate and, where necessary, kept up to date. All reasonable steps will be taken to ensure that inaccurate personal data are erased or rectified without delay.


What categories of data do we process?

Depending on your relationship with us, we may process the following categories of data:


Why do we process your personal data?

We process personal data for the following purposes:


Legal Basis for Processing

The processing of your personal data is lawful based on the performance and maintenance of the contractual relationship between you and FIIAPP. It is also based on your explicit consent, given when you voluntarily provide personal data through the forms and mechanisms available on the website.

The processing of your data for additional purposes—such as sending information about activities, newsletters, or event invitations—is based on FIIAPP’s legitimate interest and your consent provided through the legal information clause in the data collection form.


Disclosure to Third Parties and Data Retention

Your personal data are the sole responsibility of FIIAPP and may be disclosed to third parties when legally required or in the context of projects in which you participate:

FIIAPP will retain personal data for the duration of the contractual relationship. Data will be processed only to demonstrate compliance with legal or contractual obligations. After the statutory limitation periods, the data will be deleted.

In other cases, data will be retained until you request their deletion and then blocked for the minimum period required by law and the applicable limitation periods.


International Data Transfers

FIIAPP may use third-party service providers located outside the EEA in countries that no longer offer an adequate level of protection, such as companies previously adhering to the now-invalidated EU–US Privacy Shield Agreement (e.g., Mailchimp), following the Court of Justice of the EU ruling of July 2020. By providing your data, you consent to processing without the adequate safeguards required under EU law. In any case, contracts have been signed with these companies to ensure the security of personal data in accordance with EU standards.

Your personal data may also be transferred to third countries involved in the specific cooperation project in which you participate as an expert, even if those countries do not offer an adequate level of protection. This international transfer is necessary for the execution of the project, and by participating, you consent to it.

For more information on privacy safeguards, contact protecciondatos@fiiapp.es.


What are your rights?

You may exercise your rights of access, rectification, erasure, objection, portability, and restriction of processing by contacting the Data Protection Officer of FIIAPP at Avenida del Partenón, 16–18, 28042 Madrid, or by email at protecciondatos@fiiapp.es. You must include a copy of your ID to properly verify your identity.

In any case, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).